It's even easier than that. If anyone has access to upload a file to the server, all they need to do is create a php file and add 1 line with phpinfo in it and they basically have a list of all kinds of stuff on the server unless this is disabled at the server level.

Originally posted by alex042 It's even easier than that. If anyone has access to upload a file to the server, all they need to do is create a php file and add 1 line with phpinfo in it and they basically have a list of all kinds of stuff on the server unless this is disabled at the server level.